Haihaisoft Universal Player 'URL' Property ActiveX Control Buffer Overflow Vulnerability
BID:37151
Info
Haihaisoft Universal Player 'URL' Property ActiveX Control Buffer Overflow Vulnerability
| Bugtraq ID: | 37151 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 30 2009 12:00AM |
| Updated: | Dec 01 2009 01:15AM |
| Credit: | shinnai |
| Vulnerable: |
Haihaisoft Haihaisoft Universal Player 1.4.8.0 |
| Not Vulnerable: | |
Discussion
Haihaisoft Universal Player 'URL' Property ActiveX Control Buffer Overflow Vulnerability
Haihaisoft Universal Player is prone to an unspecified buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
Successful exploits allow remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts will likely result in denial-of-service conditions.
Haihaisoft Universal Player 1.4.8.0 is vulnerable; other versions may also be affected.
Haihaisoft Universal Player is prone to an unspecified buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
Successful exploits allow remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts will likely result in denial-of-service conditions.
Haihaisoft Universal Player 1.4.8.0 is vulnerable; other versions may also be affected.
Exploit / POC
Haihaisoft Universal Player 'URL' Property ActiveX Control Buffer Overflow Vulnerability
The following proof of concept is available:
The following proof of concept is available:
Solution / Fix
Haihaisoft Universal Player 'URL' Property ActiveX Control Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Haihaisoft Universal Player 'URL' Property ActiveX Control Buffer Overflow Vulnerability
References:
References:
- Haihaisoft Universal Player ActiveX Control Remote Buffer Overflow (shinnai)
- Haihaisoft Universal Player Homepage (Haihaisoft)
- Microsoft Knowledge Base Article 240797 (Microsoft)